Two RMMs walk into a phish… [Research Saturday]
CyberWire Daily22 Marras 2025

Two RMMs walk into a phish… [Research Saturday]

Alex Berninger, Senior Manager of Intelligence at Red Canary, and Mike Wylie, Director, Threat Hunting at Zscaler, join to discuss four phishing lures in campaigns dropping RMM tools. Red Canary and Zscaler uncovered phishing campaigns delivering legitimate remote monitoring and management (RMM) tools—like ITarian, PDQ, SimpleHelp, and Atera—to gain stealthy access to victim systems. Attackers used four main lures (fake browser updates, meeting invites, party invitations, and fake government forms) and often deployed multiple RMM tools in quick succession to establish persistent access and deliver additional malware. The report highlights detection opportunities, provides indicators of compromise, and stresses the importance of monitoring authorized RMM usage, scrutinizing trusted services like Cloudflare R2, and enforcing strict network and endpoint controls. The research can be found here: You’re invited: Four phishing lures in campaigns dropping RMM tools Learn more about your ad choices. Visit megaphone.fm/adchoices

Tämä jakso on lisätty Podme-palveluun avoimen RSS-syötteen kautta eikä se ole Podmen omaa tuotantoa. Siksi jakso saattaa sisältää mainontaa.

Jaksot(3652)

You've been muted...permanently. [Research Saturday]

You've been muted...permanently. [Research Saturday]

Ismael Valenzuela, Arctic Wolf’s VP of Labs, Threat Research and Intelligence, discusses their work on "BlueNoroff Uses ClickFix, Fileless PowerShell, and AI-Generated Fake Zoom Meetings to Target Web...

6 Kesä 21min

The NSA gets an AI upgrade.

The NSA gets an AI upgrade.

Anthropic brings Mythos to the NSA. A Palantir executive emerges as a possible CISA pick. A Linux flaw is under active attack. Minecraft malware goes commercial. An npm package gets caught in the Mias...

5 Kesä 31min

Not every headhunter is hiring.

Not every headhunter is hiring.

The Five Eyes issue a rare joint warning on China. Jen Easterly weighs in on Trump’s AI EO. Researchers warn everyday notifications can become AI attack vectors. IronWorm is a sophisticated Rust-based...

4 Kesä 30min

The AI race gets a referee.

The AI race gets a referee.

AI oversight arrives at the White House. A Cyber Force gains momentum. Critical infrastructure comes under cyberattack. Acer faces zero-day trouble. A stock exchange executive gets spied on for months...

3 Kesä 31min

The bugs are piling up faster than the fixes.

The bugs are piling up faster than the fixes.

A federal watchdog questions NIST over its vulnerability database backlog. Google patches an Android zero-day. Citizen Lab exposes a powerful location-tracking platform. Malware hides commands in Stea...

2 Kesä 30min

AI joins the chain of command.

AI joins the chain of command.

Battlefield AI sparks debate. Election cyber threats rise. A critical Windows flaw is under active attack. CISA weighs new reporting rules. Russian targets face a stealthy hacking campaign. A 19-year-...

1 Kesä 29min

CyberWire Daily at 10: The evolution of ransomware. [Special Edition]

CyberWire Daily at 10: The evolution of ransomware. [Special Edition]

In this special edition of CyberWire Daily’s 10th anniversary series, N2K CyberWire's Maria Varmazis and Dave Bittner consider the tactics, trends, and turning points that shaped the threat landscape ...

31 Touko 22min

GPS: A backbone for critical infrastructure. [T-Minus: Space-Cyber Briefing]

GPS: A backbone for critical infrastructure. [T-Minus: Space-Cyber Briefing]

Since its original creation in the 1970s, GPS has evolved from a technology primarily used by the military to a foundation for modern society.  After the removal of selective availability for civilia...

31 Touko 26min

Suosittua kategoriassa Politiikka ja uutiset

uutiscast
aikalisa
rss-ootsa-kuullut-tasta
politiikan-puskaradio
ootsa-kuullut-tasta-2
rss-vaalirankkurit-podcast
otetaan-yhdet
rss-podme-livebox
rss-asiastudio
the-ulkopolitist
et-sa-noin-voi-sanoo-esittaa
tervo-halme
rss-girls-finish-f1rst
rss-pinnalla
linda-maria
viisupodi
rss-mina-ukkola
rss-vain-talouselamaa
rss-ulkopoditiikkaa